AMENDMENTS TO THE CLAIMS 

1 . (Currently Amended) A security communication packet processing apparatus that 
performs at least one of encryption processing, decryption processing and authentication 
processing te-on an inputted packet so as to construct a processed packet corresponding 
to the inputted packet , said security communication packet processing apparatus 
comprising: 

a control unit operable to divide the inputted packet into data blocks each having a 
Bl bit length, and sequentially output the data blocks obtained by the di vision, the Bl bit 
length being a unit of a data block on which one of the encryption processing and the 
decryption processing is performed; 

at least one encryption processing unit operable to perform one of the encryption 
processing and the decryption processing m-a -on the data block blocks un.it of Bl bits 
outputted from said control unit ; 

at least one authentication processing unit operable to perform the authentication 
processing in a data block unit of B2 bits on data blocks each having a B2 bit length *** 
parallel to th e encryption processing or the decryption proc e ssing p e rform e d by said at 
least one encryption processing unit , and output an authentication value indicating the 
result of the authentication processing, the data block unit of B2 bit s B2 bit length bei ng a 
unit of a data block on which the authentication processing is performed and being n 
times the data block unit of Bl bits having the Bl bit length ; 

at least one data block accumulation unit operable to accumulate the data blocks 
each having the Bl bit length te-on which the encryption processing has been performed 
by said at least one encryption processing unit, and, wh e n the amount of accumulat e d 
data blocks r e aches B2 bits when the number of accumulated encrypted data blocks each 
having the Bl bit length reaches n , output the data bleefes- block having the B2 bit length 
made up of the n data blocks each having the Bl bit length, to said at least one 
authentication processing unit; and 

a packet construction unit operable to receive the encrypted or decrypted data 
blocks from said at least one encryption processing unit, receive the authentication value 
from said at least one authentication processing unit, and construct reconstruct, according 
to a predetermined format, a processed p acket corresponding to the inputted packet 
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including by using the received data blocks and the authentication value; a«4 

a control unit op e rable to divide th e inputted pack e t into th e data blocks of Bl 
bits, and output th e data blocks s e qu e ntially to said at least on e e ncryption proc e ssing 

wherein when the inputted packet is a packet which requires both encryption 
processing and authentication processing, the encryption processing of a first the data 
block having the Bl bit length by said at least one encryption processing unit and the 
authentication processing of a s e cond the data block having the B2 bit length by said at 
least one authentication processing unit are performed in parallel; , th e s econd data block 
to which th e authentication processing is being p e rform e d being a data block which is 
diff e r e nt from th e first data block and to which th e e ncryption processing has already 
been perform e d by said at l e ast on e e ncryption unit and accumulat e d in said at l e ast one 
data block accumulation unit. 

said at least one encryption processing unit is operable to generate encrypted data 
blocks by performing, one by one, the encryption processing on the data blocks each 
having the Bl bit length outputted, one by one, from said control unit and output, one by 
one, the generated encrypted data blocks to said at least one data block accumulation unit 
and said packet construction unit; 

said at least one data block accumulation unit is operable to accumulate the 
encrypted data blocks which have been outputted from said at least one encryption 
processing unit and when the number of accumulated encrypted data blocks each having 
the Bl bit length reaches n. output the data block having the B2 bit length made up of the 
n encrypted data blocks each having the Bl bit length, to said at least one authentication 
processing unit; 

said at least one authentication processing unit is operable to update an 
intermediate value obtained in the middle of generating the authentication value when 
said authentication processing unit receives the data block having the B2 bit length from 
said data block accumulation unit, using the data block having the B2 bit length, and 
output the intermediate value as the authentication value when said authentication 
processing unit updates the intermediate value using the at least one data block having the 
B2 bit length corresponding to the inputted packet; and 
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said packet construction unit is operable to (i) receive, from said at least one 
encryption processing unit and accumulate, one by one, the encrypted data blocks 
corresponding to the data blocks obtained by dividing the inputted packet (ii) receive the 
authentication value from said at least one authentication processing unit, and (in) 
reconstruct the processed packet by using a set of the accumulated encrypted data blocks 
and the authentication value. 



2. (Currently Amended) The security communication packet processing apparatus 
according to Claim 1, wherein: 

said control unit is operable to judge whether the inputted packet is a first type 
packet requiring the encryption processing and the authentication processing, a second 
type packet requiring the decryption processing and the authentication processing, a third 
type packet requiring one of the encryption processing and the decryption processing, or 
a fourth type packet requiring the authentication processing only; 

when said control unit judges that the inputted packet is the first type packet, said 
control unit is operable to divide the inputted p acket into the data blocks of Bl bits each 
having the Bl bit length and output the divided data blocks each having the Bl bit length 
sequentially to said at least one encryption processing unit; 

when said control unit judges that the inputted packet is the second type packet, 
said control unit is operable to divide the inputted packet into the data blocks of Bl bits 
each having the Bl bit length , output the divided data blocks of Bl bits each having the 
Bl bit length sequentially to said encryption processing unit, divide the inputted packet or 
a duplicate of the inputted packet into the data blocks of B2 bits each having the B2 bit 
length , and output the divided data blocks of B2 bits each having the B2 bit length 
sequentially to said at least one authentication processing unit; 

when said control unit judges that the inputted packet is the third type packet, said 
control unit is operable to divide the inputted packet into the data blocks of Bl bits each 
having the Bl bit length and output the divided data blocks each having the Bl bith 
length sequentially to said at least one encryption processing unit; and 

when said control unit judges that the inputted packet is the fourth type packet, 
said control unit is operable to divide the inputted p acket into the data blocks of B2 bits 
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each having the B2 bit length and output the divided data blocks each having the B2 bit 
length sequentially to said at least one authentication processing unit. 

3. (Previously Presented) The security communication packet processing unit 
according to Claim 1 , wherein: 

the number of at least one of said at least one encryption processing unit and said 
at least one authentication processing unit is two or more; and 

the number of said at least one data block accumulation unit is equal to the 
number of said at least one encryption processing unit. 

4. (Previously Presented) The security communication packet processing apparatus 
according to Claim 3, wherein said control unit is operable to specify, among two or more 
encryption processing units or two or more authentication processing units, said 
encryption processing unit or said authentication processing unit that is ready for 
processing, and output the data blocks to the specified encryption processing unit or 
authentication processing unit. 

5. (Previously Presented) The security communication packet processing apparatus 
according to Claim 1, further comprising a data path connection switching unit operable 
to connect the output of said control unit and the input of said at least one encryption 
processing unit, the output of said control unit and the input of said at least one 
authentication processing unit, the output of said at least one encryption processing unit 
and the input of said at least one data block accumulation unit, and the output of said at 
least one data block accumulation unit and the input of said at least one authentication 
processing unit, respectively and independently. 

6. (Currently Amended) The security communication packet processing apparatus 
according to Claim 5, wherein: 

said control unit is operable to judge whether the inputted packet is a first type 
packet requiring the encryption processing and the authentication processing, a second 
type packet requiring the decryption processing and the authentication processing, a third 
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type packet requiring one of the encryption processing and the decryption processing, or 
a fourth type packet requiring the authentication processing only; 

when said control unit judges that the inputted packet is the first type packet, said 
control unit is operable to control said data path connection switching unit so as to 
connect the output of said control unit and the input of said at least one encryption 
processing unit, the output of said at least one encryption processing unit and the input of 
said at least one data block accumulation unit, and the output of said at least one data 
block accumulation unit and the input of said at least one authentication processing unit; 

when said control unit judges that the inputted packet is the second type packet, 
said control unit is operable to control said data path connection switching unit so as to 
connect the output of said control unit and the input of said at least one encryption 
processing unit, and the output of said control unit and the input of said at least one 
authentication processing unit; 

when said control unit judges that the inputted packet is the third type packet, said 
control unit is operable to control said data path connection switching unit so as to 
connect the output of said control unit and the input of said at least one encryption 
processing unit; and 

when said control unit judges that the inputted packet is the fourth type packet, 
said control unit is operable to control said data path connection switching unit so as to 
connect the output of said control unit and the input of said at least one authentication 
processing unit. 

7. (Previously Presented) The security communication packet processing apparatus 
according to Claim 6, wherein: 

the number of at least one of said at least one encryption processing unit and said 
at least one authentication processing unit is two or more; and 

the number of said at least one data block accumulation unit is equal to the 
number of said at least one encryption processing unit. 

8. (Previously Presented) The security communication packet processing apparatus 
according to Claim 7, wherein said control unit is operable to specify, among two or more 
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encryption processing units or two or more authentication processing units, said 
encryption processing unit or said authentication processing unit that is ready for 
processing, and make said data path connection switching unit perform a connection for 
the specified encryption processing unit or authentication processing unit. 

9. (Currently Amended) The security communication packet processing apparatus 
according to Claim 1 , further comprising a processing data saving unit provided for each 
of at least one of said at least one encryption processing unit, said at least one 
authentication processing unit and said at least one data block accumulation unit, each 
processing data saving unit having a memory are a, for each processing unit for which 
said processing data saving unit is provided- for temporarily suspending the processing of 
#*e~ at least one data blocks block in the processing unit for which said proc e ssing data 
saving unit is provid e d , and saving the data bleeks- block which wefe- was being 
processed in the processing unit corr e sponding r e specti v e ly to th e proc e ssing unit . 

10. (Currently Amended) The security communication packet processing apparatus 
according to Claim 9, wherein said control unit is operable to specify the processing unit 
that is performing the processing of the data blocks block of the inputted p acket wi#* 
having the lowest priority among the processing units, and, after suspending the 
processing of the data blocks block in the processing unit and saving the data blocks 
block which were -was being processed in the processing unit into said processing data 
saving unit provided to the processing unit performing the processing of the data blocks 
block of the inputted packet with- having the lowest priority, make the processing unit 
perform the processing of the data blocks block of the- another inputted packet. 

1 1 . (Previously Presented) The security communication packet processing apparatus 
according to Claim 10, further comprising a data path connection switching unit operable 
to connect the output of said control unit and the input of said at least one encryption 
processing unit, the output of said control unit and the input of said at least one 
authentication processing unit, the output of said at least one encryption processing unit 
and the input of said at least one data block accumulation unit, and the output of said at 
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least one data block accumulation unit and the input of said at least one authentication 
processing unit, respectively and independently. 

12. (Previously Presented) The security communication packet processing apparatus 
according to Claim 11, wherein: 

the number of at least one of said at least one encryption processing unit and said 
at least one authentication processing unit is two or more; and 

the number of said at least one data block accumulation unit is equal to the 
number of said at least one encryption processing unit. 

13. (Currently Amended) The security communication packet processing apparatus 
according to Claim 1 , further comprising a processing data saving unit provided for each 
of at least two of said at least one encryption processing unit, said at least one 
authentication processing unit and said at least one data block accumulation unit, each 
processing data saving unit having a memory area shared by the processing units unit for 
temporarily suspending the processing of the- at least one data blocks block in the 
processing unit and saving the data bieeks- block which were -was being processed in the 
processing trats umt . 

14. (Currently Amended) The security communication packet processing apparatus 
according to Claim 13, wherein said control unit is operable to specify, among the 
processing units, the processing unit that is performing the processing of the data blocks 
block of the inputted p acket wkh -having the lowest priority, and, after suspending the 
processing of the data blocks block in the processing unit and saving the data blocks 
block which were -was being processed in the processing unit in said processing data 
saving unit provided to the processing unit performing the processing of the data blocks 
block of the inputted p acket wkh -having the lowest priority, make the processing unit 
perform the processing of the data blocks block of the- another inputted packet. 

15. (Previously Presented) The security communication packet processing apparatus 
according to Claim 14, further comprising a data path connection switching unit operable 
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to connect the output of said control unit and the input of said at least one encryption 
processing unit, the output of said control unit and the input of said at least one 
authentication processing unit, the output of said at least one encryption processing unit 
and the input of said at least one data block accumulation unit, and the output of said at 
least one data block accumulation unit and the input of said at least one authentication 
processing unit, respectively and independently. 

16. (Previously Presented) The security communication packet processing apparatus 
according to Claim 15, wherein: 

the number of at least one of said at least one encryption processing unit and said 
at least one authentication processing unit is two or more; and 

the number of said at least one data block accumulation unit is equal to the 
number of said at least one encryption processing unit. 

17. (Previously Presented) The security communication packet processing apparatus 
according to Claim 1, wherein the Bl is 64, and the B2 is 512. 

18. (Currently Amended) A security communication packet processing method that 
performs for performing at least one of encryption processing, decryption processing and 
authentication processing te-on an inputted packe t so as to construct a processed packet 
corresponding to the inputted packet , said security communication packet processing 
method comprising: 

dividing the inputted packet into data blocks of Bl bits each having a Bl bit 
length, and sequentially outputting the data blocks obtained bv said dividing, the Bl bit 
length being a unit of a data block on which one of the encryption processing and the 
decryption processing is performed ; 

performing the encryption processing or the decryption processing to th e divid e d 
data blocks of Bl bits on the data blocks outputted in said outputting ; 

accumulating the e ncrypted data blocks and outputting the data blocks wh e n th e 
amount of accumulat e d data blocks r e aches B2 bits, B2 bits b e ing n times the numb e r of 
Bl bits; 
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performing the authentication processing to the outputted data blocks of B2 bits in 
parall e l to th e e ncryption proc e ssing or th e d e cryption proc es sing on data blocks each 
having a B2 bit length , and outputting the-an authentication value indicating the result of 
the authentication processin g, the B2 bit length being a unit of a data block on which the 
authentication processing is performed and being n times the data block having the Bl bit 
length ; 

accumulating the data blocks each having the Bl bit length on which the 
encryption processing has been performed in said performing of the encryption 
processing, and when the number of accumulated encrypted data blocks each having the 
Bl bit length reaches n, outputting the data block having the B2 bit length made up of the 
n data blocks each having the Bl bit length so that the data block the having the B2 bit 
length is processed in said performing of the authentication processing: 

receiving the e ncrypt e d or decrypted data blocks encrypted or decrypted in said 
performi ng of the encryption processing or said performing of the decryption processing , 
receiving the outputted authentication value outputted in said outputting of the 
authentication value , and constructing reconstructing, according to a predetermined 
format, a processed packet corresponding to the inputted packet by using th e pack e t 
includ i ng the received data blocks and the authentication value r wherein: 

wher e in when the inputted packet is a packet which requires both encryption 
processing and authentication processing, the encryption processing of a first the data 
block having the B 1 bit length performed in said performing of the encryption processing 
and the authentication processing of a s e cond the data block having the B2 bit length 
performed in said performing of the authentication processing are performed in parallel^ 
th e s e cond data block to which th e auth e ntication processing is b e ing perform e d b e ing a 
data block which is diff e r e nt from the first data block and to which the encryption 
proc e ssing has alr e ady b ee n performed in said p e rforming of th e encryption proc e ssing 
and accumulated in said accumulating of th e encrypted data blocks. 

in said performing of the encryption processing, encrypted data blocks are 
generated by performing, one by one, the encryption processing on the data blocks each 
having the Bl bit length outputted one by one in said outputting of the data blocks, and 
the generated encrypted data blocks are outputted one by one so that the data blocks are 
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processed in both of 0 said accumulating of the data blocks each having the Bl bit length 
and outputting of the data block having the B2 bit length, and ii) said reconstructing of 
the processed packet; 

in said accumulating of the data blocks each having the Bl bit length and 
outputting of the data block having the B2 bit length, the encrypted data blocks which 
have been outputted in said performing of the encryption processing are accumulated, 
and when the number of accumulated encrypted data blocks each having the Bl bit length 
reaches n, the data block having B2 the bi t length made up of the n encrypted data blocks 
each having the Bl bit length is outputted so that the data block having the B2 bit length 
is processed in said perform ing of the authentication processi ng; 

in said performing of the authentication processing, an intermediate value 
obtained in the middle of generating the authentication value is updated using the data 
block having the B2 bit length, when the data block having the B2 bit length accumulated 
in said accumulating is received, and the intermediate value is outputted as the 
authentication value when the intermediate value is updated using the at least one data 
block having the B2 bit length corresponding to the inputted packet; and 

in said reconstructing, (i) the encrypted data blocks obtained in said performing of 
the encryption processing and corresponding to the data blocks obtained by dividing the 
inputted packet are received and accumulated one by one, (ii) the authentication value 
generated in said generating of the authentication value is received, and (iiO the 
processed packet is reconstructed by using a set of the accumulated encrypted data blocks 
and the authentication value. 

19. (Currently Amended) The security communication packet processing method 
according to Claim 18, furth e r comprising wherein : 

said dividing of the inputted packet comprises j udging whether the inputted 
packet is a first type packet requiring the encryption processing and the authentication 
processing, a second type packet requiring the decryption processing and the 
authentication processing, a third type packet requiring only one of the encryption 
processing and the decryption processing, or a fourth type packet requiring the 
authentication processing only;r and 



when the inputted packet is judged to be the first type packet, said method causes 
controll ing so that the division in said dividing of the inputted packet, the encryption 
processing performed in said performing of the encryption processing or the decryption 
processing, the accumulation in said accumulating of the encrypted data blocks, the 
authentication processing performed in said performing of the authentication processing, 
and the construction performed in said constructing of the packet are- to be p erformed. 

20. (Previously Presented) The security communication packet processing apparatus 
according to claim 5, wherein said data path connection switching unit is operable to 
switch a data path between two of said control unit, said at least one encryption 
processing unit, said at least one authentication processing unit and said at least one data 
block accumulation unit, so that only packets A pass through said at least one data block 
accumulation unit and only packets B bypass said at least one data block accumulation 
unit, the packets A being a packet which requires both encryption processing and 
authentication processing and a packet which requires both decryption processing and 
authentication processing, and the packets B being a packet which requires only 
encryption processing, a packet which requires only decryption processing and a packet 
which requires only authentication processing. 

2 1 . (Currently Amended) The security communication packet processing apparatus 
according to claim 9, wherein the at least one data blocks block is are-saved from said at 
least one encryption processing unit and said at least one authentication processing unit 
into said processing data saving unit, and the saved data bieeks- block is are-restored from 
said processing data saving unit to the said at least one encryption processing unit and 
said at least one authentication processing unit, via said at least one data block 
accumulation unit. 

22. (Currently Amended) The security communication packet processing apparatus 
according to claim 14, wherein said control unit is further operable to make another 
processing unit read the data bieeks- block from said processing data saving unit and 
restart the processing, the another processing unit having a function equivalent to a 
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function of the processing unit performing the processing of the data blocks block of the 
inputted packet with the lowest priority, from which processing unit the data blocks block 
a*e-is_saved into said processing data saving unit. 
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